Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.
{
"versions": [
{
"introduced": "8.0.0"
},
{
"last_affected": "9.5.10"
},
{
"introduced": "8.0.0"
},
{
"last_affected": "9.5.10"
},
{
"introduced": "10.0.0"
},
{
"last_affected": "10.1.5"
},
{
"introduced": "10.0.0"
},
{
"last_affected": "10.1.5"
},
{
"introduced": "10.2.0"
},
{
"last_affected": "10.2.5"
},
{
"introduced": "10.2.0"
},
{
"last_affected": "10.2.5"
},
{
"introduced": "10.3.0"
},
{
"last_affected": "10.3.3"
},
{
"introduced": "10.3.0"
},
{
"last_affected": "10.3.3"
},
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
}